version: "3.7"
services:
  searxng:
    container_name: searxng
    hostname: searxng
    image: searxng/searxng:latest
    networks:
      - searxng
      - proxy
    volumes:
      - ./searxng:/etc/searxng:rw
    environment:
      - SEARXNG_BASE_URL=https://${SEARXNG_HOSTNAME:-localhost}/
    labels:
      - traefik.enable=true
      - traefik.http.routers.searxng.entrypoints=web
      - traefik.http.routers.searxng.rule=Host(`search.local.domain`)
      - traefik.http.middlewares.searxng-https-redirect.redirectscheme.scheme=websecure
      - traefik.http.routers.searxng.middlewares=searxng-https-redirect
      - traefik.http.routers.searxng-secure.entrypoints=websecure
      - traefik.http.routers.searxng-secure.rule=Host(`search.local.domain`)
      - traefik.http.routers.searxng-secure.tls=true
      - traefik.http.routers.searxng-secure.service=searxng
      - traefik.http.services.searxng.loadbalancer.server.port=8080
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    logging:
      driver: json-file
      options:
        max-size: 1m
        max-file: "1"
networks:
  searxng: null
  proxy:
    external: true